CVE-2026-19058

MediumCVSS 5.3/10Last modified Oct 23, 2026

Description

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Aug 6, 2026
Last modified: Oct 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-190593.3A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor CVE-2026-19064.3The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up t CVE-2026-190605.3A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code in CVE-2026-190613.7A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of t CVE-2026-190627.3A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file CVE-2026-190644.3A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of CVE-2026-190656.3A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown proces CVE-2026-190664.3A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the CVE-2026-190676.3A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file CVE-2026-190686.3A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /trea CVE-2026-190696.3A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /tre CVE-2026-19077.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. T